Valid H12-724 Test Answers & Huawei H12-724 Exam PDF [Q169-Q191]

4/5 - (1 vote)

Valid H12-724 Test Answers & Huawei H12-724 Exam PDF

Huawei H12-724 Certification Real 2023 Mock Exam

Q169. Which of the following descriptions are correct for proxy-based anti-virus gateways? (multiple choice)

The detection rate is higher than the flow scanning method

System overhead will be relatively small

Cache all files through the gateway’s own protocol stack

More advanced operations such as decompression, shelling, etc. can be performed

Q170. Regarding computer viruses, which of the following options is correct?

Patching the system can completely solve the virus intrusion problem

Computer viruses are latent, they may be latent for a long time, and only when they encounter certain conditions will they begin to carry out sabotage activities

Computer viruses are contagious. They can spread through floppy disks and CDs, but they will not spread through the Internet.

All computer viruses must be parasitic in files and cannot exist independently

Q171. Deployed by an enterprise network managerAgile Controller-Campus withSACG Later;Identity authentication is successful but cannot access the post-authentication domain, This phenomenon may be caused by any reason? (Multiple choice)

A serious violation will prohibit access to the post-authentication domain.

The access control list of the post-authentication domain has not been delivered SACG.

ALC The number of rules issued is too many, and a lot of time is required to match, causing interruption of access services.

Agile Controller-Campus Wrong post-authentication domain resources are configured on the server.

Q172. Regarding the Anti-DDoS cloud cleaning solution; which of the following statements is wrong?

Ordinary attacks will usually be cleaned locally first.

If there is a large traffic attack on the network, send it to the cloud cleaning center to share the cleaning pressure.

Since the Cloud Cleaning Alliance will direct larger attack flows to the cloud for cleaning, it will cause network congestion.

The closer to the attacked self-labeled cloud cleaning service, the priority will be called.
155955cc-666171a2-20fac832-0c042c0430

Q173. Regarding the description of intrusion detection technology, which of the following statements is correct?

It is impossible to detect violations of security policies.

It can detect all kinds of authorized and unauthorized intrusions.

Unable to find traces of the system being attacked.

is an active and static security defense technology.
155955cc-666171a2-20fac832-0c042c0425

Q174. Regarding WLAN, which of the following descriptions is correct?

WLAN Is to adopt 80211 Technical WiFi

WLAN There are two basic architectures: FAT AP with AC+FIT AP

AC+FATAP The architecture is suitable for medium and large use scenarios

AC+FITAP Autonomous network architecture

Q175. What are the three main steps of business free deployment? (Multiple choice)

Define security group

Define and deploy group policies

The system runs automatically

Security group reported by the system

Define user groups

Q176. Which of the following options does not belong to the security risk of the application layer of the TCP/IP protocol stack?

Virus

Buffer overflow

System vulnerabilities

Port scan

Q177. The administrator has configured file filtering to prohibit internal employees from uploading development files, but internal employees can still upload development files. Which of the following is not allowed Can the reason?

The file filtering configuration file is not referenced in the security policy

File filtering configuration file is incorrect

License is not activated.

The action configuration of the file extension does not match is incorrect

Q178. Security authentication is mainly achieved through security policies. The terminal host support management for the security check of monthly users is mainly realized by loose check policies. End user behavior management is mainly realized by monitoring policies. If users need to formulate policies according to their own wishes, they can use them. Custom strategy.

True

False

Q179. When configuring the antivirus software policy, if you set”The required antivirus software violation level is not installed or running”for”generally”And check”out Now serious violation of the rules prohibits access to the network”Options. When the user uses Any office Certify, The certification is passed, but the result of the security check Can the user access the network when the virus software is not turned on?

Can access the network? Can also access network resources.

Cannot access the network.

Can pick up? The network needs to be repaired before you can access network resources.

You can access the network, but you need to re-authenticate to access network resources.

Q180. Hardware in useSACG At the time of certification,SACG After the configuration is completed, you can seeSACG andAgile Agile Controller-Campus The linkage is successful, but the user authentication fails. This phenomenon may be caused by the following reasons? (Multiple choice)

User flow has not passed SACG.

SACG There is no release on the user stream.

SACG There is no closed state detection on it.

Agile Controller-Campus On and SACG Wrong key configuration for linkage

Q181. In the campus network, employees can use 802.1X, Portal,MAC Address or SACG Way to access. Use different access methods according to different needs to achieve the purpose of user access control.

True

False

Q182. Place refers to the terminal environment when end-user use strategy management center access to controlled network office, which options are correct about place? (Choose 2 answers)

strategy management center only support the default place

The default place only support by way of cable access network scenario

can be customized places

when allocation strategy template for the end user, need to select the corresponding places

Q183. The user needs of a university are as follows:
1. The environment is large, and the total number of two-way traffic can reach 800M. Huawei USG6000 series firewall is deployed at its network node.
2. The intranet is divided into student area, server area, etc., users are most concerned about the security of the server area to avoid attacks from various threats.
3. At the same time, some pornographic websites in the student area are prohibited.
The external network has been configured as an untrust zone and the internal network has been configured as a trust zone on the firewall. How to configure the firewall to meet the above requirements?
155955cc-666171a2-20fac832-0c042c0415

You can directly turn on the AV, IRS protection functions, and URL filtering functions in the global environment to achieve the requirements

To the untrust direction, only enable AV and IPS protection functions for the server zone to protect the server

In the direction of untrust to the intranet, only the AV and IPS protection functions are turned on for the server area to protect the server

Go to the untrust direction to open the URL filtering function for the entire campus network, and filter some classified websites

Q184. When the account assigned by the administrator for the guest is connected to the network, the audit action that the administrator can perform on the guest does not include which of the following options?

Visitor online and offline records

Force users to go offline

Account deactivation 1 reset Password

Send a warning message to the user

Q185. If the processing strategy for SMTP virus files is set to alert, which of the following options is correct?

Generate logs and discard

Generate logs and forward them

Delete the content of the email attachment

Add announcement and generate log

Q186. The terminal host access control function does not take effect, the following is SACG View information on:<FW> display right- manager role-id rule Advanced ACL 3099 ,25 rules,not bingding with vpn-instance Ad’s step is 1 rule 1000 permit ip (1280 times matched) rule 1001 permit ip destination 172.18.11.2210 (581 times matched) rule 1002 permit ip destination 172:18.11.2230 (77 times matched) rule 1003 permit ip destination 172.19.0.0 0.0 255.255 (355 Book times matched) rule 1004 deny ip (507759 times matched) Which of the following statements is correct?

172.18.11.221 It is the server of the isolation domain.

The escape route was opened.

172.18.11.223 It is a post-domain server.

The terminal host stream is the default ACL Blocked.

Q187. Under the CLI command, which of the following commands can be used to view the AV engine and virus database version?

display version av-sdb

display utm av version

display av utm version

display utm version

Q188. The AD/LDAP account can be synchronized to the Agile Controller-Campus or not to the Agile Controller-Campus. Synchronize.
The Agile Controller-Campus can only be authorized by user group. If it is not synchronized to the Agile Controller-Campus, it can be fine-tuned based on the account.
Authorization

True

False

Q189. Which of the following options belong to the upgrade method of the anti-virus signature database of Huawei USG6000 products? (multiple choice)

Local upgrade

Manual upgrade

Online upgrade

Automatic upgrade

Q190. Regarding firewall and IDS, which of the following statements is correct?

The firewall is a bypass device, used for fine-grained detection

IDS is a straight line equipment and cannot be used for in-depth inspection

The firewall cannot detect malicious operations or misoperations by insiders

IDS cannot be linked with firewall

Q191. Which of the following options are correct for the description of visitor management? (Multiple choice)

Visitor registration account can be configured to be exempt from approval

Guest login can only be configured as Web Way of webpage